Hi,

> dpatch-get-origtargz should provide a way to do sum checking 
> (md5, sha1) to ensire that the contents of upstream file was has not been 
> silently changed for some reason keeping the same file name.
> 
> I suggest that dpatch-get-origtargz accept options for exact url to download 
> the tarball from (since the one provided in watch file might not be reliable 
> when patterned) and checksum to verify against.

Patch welcome.
Shouldn't be too hard ti implement what you say; but I am doubtful if it's
really feasible or easy to maintain the hash sum on developer side.

regards,
        junichi


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to